Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x86) Version: 31-07-2017
Exécuté par Diaby (02-08-2017 14:22:58)
Exécuté depuis C:\Users\Diaby\Downloads
Microsoft Windows 7 Professionnel Service Pack 1 (X86) (2016-05-25 16:25:53)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
123 (S-1-5-21-377985148-792701347-3327087119-1003 - Administrator - Enabled) => C:\Users\123
Administrateur (S-1-5-21-377985148-792701347-3327087119-500 - Administrator - Enabled) => C:\Users\Administrateur.Diaby-PC.000
Diaby (S-1-5-21-377985148-792701347-3327087119-1001 - Administrator - Enabled) => C:\Users\Diaby
HomeGroupUser$ (S-1-5-21-377985148-792701347-3327087119-1002 - Limited - Enabled)
Invité (S-1-5-21-377985148-792701347-3327087119-501 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avira Antivirus (Disabled - Out of date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Emsisoft Anti-Malware (Enabled - Up to date) {701CB209-EBBC-AADC-11E6-DE73E7AF4C9D}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620}
AS: Avira Antivirus (Disabled - Out of date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Flash Player 23 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 23.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 26 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 26.0.0.137 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM\...\Adobe Flash Player PPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM\...\Adobe Shockwave Player) (Version: 12.2.5.195 - Adobe Systems, Inc.)
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.28.28 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM\...\{661C79C2-D156-419C-81CA-D1A2523B0841}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Hidden
Avira Connect (HKLM\...\{dd9049b8-31d1-40bd-8c8c-97a7b087a78f}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG)
Bandicam (HKLM\...\Bandicam) (Version: 3.1.0.1064 - Bandisoft.com)
CCleaner (HKLM\...\CCleaner) (Version: 5.32 - Piriform)
CleanMem (HKLM\...\CleanMem) (Version: v2.5.0 - PcWinTech.com)
Crossfire Europe EU (HKLM\...\Crossfire Europe EU_is1) (Version: V1502 - Smilegate Europe)
D3DX10 (HKLM\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DarkComet RAT Remover version 1.0 (HKLM\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.)
DragonBoost (HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\119) (Version: - ) <==== ATTENTION
Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 2017.6 - Emsisoft Ltd.)
Galerie de photos (HKLM\...\{439B34FF-F74E-4807-B5E2-4B758551DA6B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
IObit Malware Fighter 5 (HKLM\...\IObit Malware Fighter_is1) (Version: 5.2 - IObit)
Junk Mail filter update (HKLM\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Keylogger Detector (HKLM\...\Keylogger Detector) (Version: - )
KeyScrambler (HKLM\...\KeyScrambler) (Version: 3.11.0.3 - QFX Software Corporation)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Metin2client 9.1 (HKLM\...\Metin2client 9.1) (Version: 9.1 - HackMetin2)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.6.2 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.6.01590 - Microsoft Corporation)
Microsoft .NET Framework 4.6.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01590 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{D9D937B0-E842-4130-9588-B948E876904A}) (Version: 10.0.1600.22 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM\...\{0266CCBE-BBD8-416C-A48F-7FC47C6DB566}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft Virtual PC 2007 SP1 (HKLM\...\{AD483998-2E9A-4405-83FF-6E503AF49CBB}) (Version: 6.0.192.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{CC1DB186-550F-3CFE-A2A9-EBA5E5A34BC1}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Module linguistique de la visionneuse d'aide Microsoft 1.0 - FRA (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - FRA) (Version: 1.0.30319 - Microsoft Corporation)
Movie Maker (HKLM\...\{21764A96-6748-4B83-89E7-7A5063BF156C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 54.0.1 (x86 fr) (HKLM\...\Mozilla Firefox 54.0.1 (x86 fr)) (Version: 54.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0.1 - Mozilla)
Objets de gestion Microsoft SQL Server 2008 R2 (HKLM\...\{B01A7AFC-0356-43AF-A333-C65912AEA8DC}) (Version: 10.50.1447.4 - Microsoft Corporation)
Oracle VM VirtualBox 5.1.24 (HKLM\...\{F57B99A8-C19B-4A3B-A7BE-BA20AD768EAB}) (Version: 5.1.24 - Oracle Corporation)
Outils Microsoft Visual Studio 2010 ADO.NET Entity Framework (HKLM\...\{3BA7E387-9401-3371-9464-5E224D243FC5}) (Version: 10.0.30319 - Microsoft Corporation)
Package de pilotes Windows - Intel Corporation (iegdmini) Display (10/26/2009 10.2.2.1450) (HKLM\...\7C12B3CB54A17AB537E54C97DA273A2685545A6C) (Version: 10/26/2009 10.2.2.1450 - Intel Corporation)
paint.net (HKLM\...\{A1D05314-DC32-4668-A97E-51060EC8BCCD}) (Version: 4.0.12 - dotPDN LLC)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7745 - Realtek Semiconductor Corp.)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
swMSM (HKLM\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 FRA (HKLM\...\{D60023FA-3DF1-4537-93DD-13024CC4E366}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.40 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\ChromeHTML: -> <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Diaby\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\FileSyncApi.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{8932AEFE-9DB6-4f43-AFB2-5682F55E773A}\InprocServer32 -> C:\Program Files\Microsoft Virtual PC\VPCShExH.DLL => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\FileSyncApi.dll => Pas de fichier
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [ANotepad++] -> {00F3C2EC-A6EE-11DE-A03A-EF8F55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2017-06-18] ()
ContextMenuHandlers1: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Pas de fichier
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2014-06-24] (Safer-Networking Ltd.)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2017-07-04] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers2: [Emsisoft Shell Extension] -> {AB77609F-2178-4E6F-9C4B-44AC179D937A} => C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\A2CONTMENU.DLL [2015-10-21] (Emsisoft Ltd)
ContextMenuHandlers3: [Emsisoft Shell Extension] -> {AB77609F-2178-4E6F-9C4B-44AC179D937A} => C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\A2CONTMENU.DLL [2015-10-21] (Emsisoft Ltd)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Nouveau dossier\DBZ SAGAS\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Pas de fichier
ContextMenuHandlers4: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-23] (Intel Corporation)
ContextMenuHandlers6: [Emsisoft Shell Extension] -> {AB77609F-2178-4E6F-9C4B-44AC179D937A} => C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\A2CONTMENU.DLL [2015-10-21] (Emsisoft Ltd)
ContextMenuHandlers6: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Nouveau dossier\DBZ SAGAS\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2014-06-24] (Safer-Networking Ltd.)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2017-07-04] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {39E1D631-4996-447D-9CE3-3AFEA13A9600} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe
Task: {3DF3DC04-E24C-4D03-85D9-55921202ABAD} - System32\Tasks\Uninstaller_SkipUac_Diaby => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {60C57FB4-AC86-4288-91D3-FC3CA7F62DDB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-30] (Piriform Ltd)
Task: {63A82D28-6501-4EF2-86CA-ED0BF04F85DE} - System32\Tasks\ASC9_SkipUac_Diaby => C:\Program Files\IObit\Advanced SystemCare\ASC.exe
Task: {88F3C205-198F-41C9-92F5-882B17F51D5A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-06] (Google Inc.)
Task: {8E191A9E-39C9-4CCB-9F98-4AD2013DEE5B} - System32\Tasks\ASC9_PerformanceMonitor => C:\Program Files\IObit\Advanced SystemCare\Monitor.exe
Task: {C62FF49E-0010-4735-952B-C835714327EF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-06] (Google Inc.)
Task: {CABC0647-C85E-4D8D-B2C8-4DF6C07BF4D0} - System32\Tasks\Driver Booster SkipUAC (Diaby) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\system32\Macromed\Flash\FlashUtil32_26_0_0_137_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Arkoghtpeguther.job => msiexecc i HtTp /d2buh1bf1g584w cloudfront net msi rel php ST380013AS_5MR157QQXXXX5MR157QQ 2017215 /qSystemArkoghtpeguther
Task: C:\Windows\Tasks\bvyvdvge.job => C:\Users\Diaby\AppData\Local\bvyvdvge\bvyvdvge.exe <==== ATTENTION
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Chrome Cleanup Tool logs upload retry.job => c:\users\mcdiaby\downloads\chrome_cleanup_tool.exe
Task: C:\Windows\Tasks\Clean System Memory.job => C:\WINDOWS\system32\CleanMem.exe
Task: C:\Windows\Tasks\Driver Booster SkipUAC (Diaby).job => C:\Program Files\IObit\Driver Booster\4.4.0\DriverBooster.exe
Task: C:\Windows\Tasks\Fevuphmervly Launcher.job => C:\Program Files\Holush\tugesh.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d1bffee1ac4c3e.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d1c000120ba96b.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d22066d30bdfad.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d2206738002651.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\McAfee Remediation (Prepare).job => C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe
Task: C:\Windows\Tasks\McAfeeLogon.job => C:\PROGRA~1\COMMON~1\McAfee\Platform\McUICnt.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: C:\Windows\Tasks\SidebarExecute.job => C:\Program Files\Windows Sidebar\sidebar.exe
Task: C:\Windows\Tasks\update-S-1-5-21-377985148-792701347-3327087119-1001.job => C:\Program Files\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\{04080DB5-B3A3-BA1E-9ECF-2C2F482411E3}.job => C:\ProgramData\{5D3FBC1B-EA94-0BB0-4697-C277095FC0B9}\BAAA0AD1-0D01-BD7A-E248-7C414E82C7A9.exe <==== ATTENTION
Task: C:\Windows\Tasks\{09E7DB74-84BA-4925-B16A-BDD9903CBA36}.job => c:\program files\google\chrome\application\chrome.exeJhxxp:/ui.skype.com/ui/0/7.25.85.106/fr/
Task: C:\Windows\Tasks\{1AC348B7-AD68-FF1C-B28E-D7154A60845C}.job => C:\ProgramData\{2ADA52B2-9D71-E519-B68B-EFE74E52E84A}\EFB82B81-5813-9C2A-BF51-6206F3DEFB7C.exe <==== ATTENTION
Task: C:\Windows\Tasks\{1BD3C577-AC78-72DC-73FA-BFCFD1282F09}.job => C:\ProgramData\{0A964816-BD3D-FFBD-BDCA-6C8656F7CE43}\D4C33FDF-6368-8874-57D1-DBADB47B1F7C.exe <==== ATTENTION
Task: C:\Windows\Tasks\{313B6D77-91B7-4729-A8CE-71B472DEFDFD}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/
Task: C:\Windows\Tasks\{35256B5B-A4F7-1A6B-BAA8-B9AFFA9C2D07}.job => C:\Windows\system32\regsvr32.exe2/s /n /i:/rt C:\PROGRA~2\24eb7141\8ef16ab.dll <==== ATTENTION
Task: C:\Windows\Tasks\{3672E31A-81D9-54B1-59B6-288993C49B47}.job => C:\ProgramData\{FEB2EEB1-4919-591A-050F-E1F613B5BBBA}\AAABC715-1D00-70BE-3D0D-A39CF865579B.exe <==== ATTENTION
Task: C:\Windows\Tasks\{3700379E-80AB-8035-7D42-73018BA78685}.job => C:\ProgramData\{C73B4B53-7090-FCF8-CE7A-92F193FBB1A6}\1C3DB022-AB96-0789-BA12-2FB945D9983A.exe <==== ATTENTION
Task: C:\Windows\Tasks\{3F82500D-8829-E7A6-8EED-8BD7AAAE4D4F}.job => C:\ProgramData\{3D643B4E-8ACF-8CE5-241F-49E64EEF689C}\F02F1B9B-4784-AC30-F39C-9E36064BA576.exe <==== ATTENTION
Task: C:\Windows\Tasks\{45485F2B-F2E3-E880-D53A-70275FF51A73}.job => C:\ProgramData\{38F2913E-8F59-2695-881F-B3DD7AF58906}\69941886-DE3F-AF2D-17D5-9FD11F3C79D8.exe <==== ATTENTION
Task: C:\Windows\Tasks\{6705E622-D0AE-5189-F8C7-23139FAAF4C5}.job => C:\ProgramData\{569560EE-E13E-D745-591F-72542F10399B}\58BAE327-EF11-548C-D0AE-074EDFA33E67.exe <==== ATTENTION
Task: C:\Windows\Tasks\{6AE6823C-DD4D-3597-24AA-41F7824849F9}.job => C:\ProgramData\{5489DA41-E322-6DEA-5282-E82ECC03789E}\1BA81A55-AC03-ADFE-89FB-35FEE2BFD88F.exe <==== ATTENTION
Task: C:\Windows\Tasks\{72A2A6F2-C509-1159-E877-5A279F6B89A6}.job => C:\ProgramData\{468CE655-F127-51FE-0A19-2AE671D4E195}\A52D55AE-1286-E205-080C-C068E5AFDEC9.exe <==== ATTENTION
Task: C:\Windows\Tasks\{803DA72D-3796-1086-18D9-B4B5A388E4CA}.job => C:\ProgramData\{E9C21179-5E69-A6D2-D749-CFDBBE1BDD20}\635CD343-D4F7-64E8-1A6E-BF8DD38E85A8.exe <==== ATTENTION
Task: C:\Windows\Tasks\{811BEB6F-36B0-5CC4-6E67-2B54C8A88248}.job => C:\ProgramData\{628A9872-D521-2FD9-353E-AF963088CA20}\D2C5448C-656E-F327-DDC2-A054A5D12A47.exe <==== ATTENTION
Task: C:\Windows\Tasks\{8CE64007-3B4D-F7AC-70D3-46226CC128C3}.job => C:\ProgramData\{B30F16F6-04A4-A15D-95BE-C6BDD0100C69}\1496588C-A33D-EF27-3B4A-C241CAD9A7CB.exe <==== ATTENTION
Task: C:\Windows\Tasks\{8DDB2B4C-2A59-4BD4-86E2-E3C071F88604}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/
Task: C:\Windows\Tasks\{B6D26BEC-0179-DC47-976C-B9812509626B}.job => C:\ProgramData\{9184BAC3-262F-0D68-46BE-627B3F7A829B}\AEF659C6-195D-EE6D-67FA-84071644728C.exe <==== ATTENTION
Task: C:\Windows\Tasks\{B9CC9342-A99F-494E-BDC8-B0144B2136BA}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/
Task: C:\Windows\Tasks\{BC335264-0B98-E5CF-1BCD-CDF3A77DB74F}.job => C:\ProgramData\{B9A92DBE-0E02-9A15-BFA7-6AE572100A97}\ED051D5F-5AAE-AAF4-904E-E9F75A6CB9E7.exe <==== ATTENTION
Task: C:\Windows\Tasks\{BC5A07C5-0BF1-B06E-75C8-F2A9D4292B36}.job => C:\ProgramData\{31AB411D-8600-F6B6-64FB-F7FC0B322FD5}\DDFC3FBF-6A57-8814-502A-B010479A09F4.exe <==== ATTENTION
Task: C:\Windows\Tasks\{C00DA454-77A6-13FF-9770-3F58EDDC6571}.job => C:\ProgramData\{497C8777-FED7-30DC-D3F1-8E44E4C657ED}\145BF631-A3F0-419A-6D12-0B5318A793BC.exe <==== ATTENTION
Task: C:\Windows\Tasks\{C105346C-316B-4307-97C6-16882327ADA8}.job => c:\program files\google\chrome\application\chrome.exe_hxxp:/ui.skype.com/ui/0/7.24.0.104/fr/
Task: C:\Windows\Tasks\{C38ABE1B-7421-09B0-8E43-F48334855F6F}.job => C:\ProgramData\{79102ABB-CEBB-9D10-6AEC-55BDC884F946}\7B174E98-CCBC-F933-5465-0CD7663A3494.exe <==== ATTENTION
Task: C:\Windows\Tasks\{C72D3418-B588-43B7-A737-F7D20991DE46}.job => Iexplore exe3https /ui skype com ui 0 7 37 103 fr/
Task: C:\Windows\Tasks\{D0B53B8D-671E-8C26-13D2-039C28EE9AD7}.job => C:\ProgramData\{FFF45F86-485F-E82D-8C41-8779A1BD2E0A}\45CA3D03-F261-8AA8-11D6-CD6247A66E73.exe <==== ATTENTION
Task: C:\Windows\Tasks\{D1F95EA7-6652-E90C-6809-87E1AD9F0189}.job => C:\ProgramData\{2C572639-9BFC-9192-B446-5F136B69EC58}\9C2974EA-2B82-C341-7748-620E472CF6A4.exe <==== ATTENTION
Task: C:\Windows\Tasks\{D7471C96-60EC-AB3D-6467-90C2A1FFEC24}.job => C:\ProgramData\{8CB97737-3B12-C09C-5E2D-BF6C9EC40C1A}\1B614C5F-ACCA-FBF4-330F-E58BEC505FAC.exe <==== ATTENTION
Task: C:\Windows\Tasks\{DA2F7091-AA65-4DA2-A47C-02D8DE44B460}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/
Task: C:\Windows\Tasks\{DC736D9A-6BD8-DA31-C4D2-9966D4182587}.job => C:\ProgramData\{4B11775E-FCBA-C0F5-C26F-8A2BEF93D7E1}\3FCD172C-8866-A087-F779-CF33A408E177.exe <==== ATTENTION
Task: C:\Windows\Tasks\{EA9ACF9D-5D31-7836-8488-FD37BF743D2F}.job => C:\ProgramData\{386F9E0C-8FC4-29A7-6F6E-4EB2066B904E}\CC5AD77B-7BF1-60D0-7162-198937D7110E.exe <==== ATTENTION
Task: C:\Windows\Tasks\{F6C32E6E-4168-99C5-BFFD-82F34EAF93DB}.job => C:\ProgramData\{7FC06DF5-C86B-DA5E-7D26-088EB8EB7485}\EB18B799-5CB3-0032-095D-6BA79023F5EE.exe <==== ATTENTION
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
ShortcutWithArgument: C:\Users\Diaby\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\user0 - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=ChromeDefaultData
==================== Modules chargés (Avec liste blanche) ==============
2017-07-30 17:28 - 2014-05-13 12:04 - 000109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2017-07-30 17:28 - 2014-05-13 12:04 - 000416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2017-07-30 17:28 - 2014-05-13 12:04 - 000167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-07-30 17:28 - 2012-08-23 10:38 - 000574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2017-07-30 17:28 - 2012-04-03 17:06 - 000565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2017-06-30 13:22 - 2017-06-30 13:22 - 000077824 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2017-07-30 20:07 - 2016-08-10 17:13 - 000188704 _____ () C:\Program Files\IObit\IObit Malware Fighter\unrar.dll
2017-07-30 20:07 - 2016-08-10 17:13 - 000899872 _____ () C:\Program Files\IObit\IObit Malware Fighter\webres.dll
2017-07-30 20:07 - 2016-08-10 17:13 - 000151840 _____ () C:\Program Files\IObit\IObit Malware Fighter\zlibwapi.dll
2017-07-30 20:07 - 2017-05-09 10:59 - 000631584 _____ () C:\Program Files\IObit\IObit Malware Fighter\ProductStatistics.dll
2017-07-30 20:07 - 2016-12-12 16:52 - 000442144 _____ () C:\Program Files\IObit\IObit Malware Fighter\madExcept_.bpl
2017-07-30 20:07 - 2016-12-12 16:52 - 000210720 _____ () C:\Program Files\IObit\IObit Malware Fighter\madBasic_.bpl
2017-07-30 20:07 - 2016-12-12 16:52 - 000059680 _____ () C:\Program Files\IObit\IObit Malware Fighter\madDisAsm_.bpl
2017-06-12 19:51 - 2017-06-12 19:51 - 000048296 ____N () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2017-06-18 23:44 - 2017-06-18 23:44 - 000267952 ____N () C:\Program Files\Notepad++\NppShell_06.dll
2017-08-02 12:52 - 2016-08-10 17:20 - 001079296 _____ () C:\Nouveau dossier\YangBug\YangBug\Injector.exe
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ModuleCoreService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ASCAntivirusSrv => "@"="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\IMFservice => "@"="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ModuleCoreService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Il y a 7865 plus de sites.
IE trusted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\localhost -> localhost
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123simsen.com -> www.123simsen.com
Il y a 7865 plus de sites.
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123simsen.com -> www.123simsen.com
Il y a 7865 plus de sites.
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123simsen.com -> www.123simsen.com
Il y a 7865 plus de sites.
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-377985148-792701347-3327087119-1001\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-377985148-792701347-3327087119-1003\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-377985148-792701347-3327087119-500\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.0.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
MSCONFIG\Services: AdvancedSystemCareService9 => 2
MSCONFIG\Services: cmcore => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: LiveUpdateSvc => 2
MSCONFIG\Services: sgbupt => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: cmsc => "c:\program files\cmcm\Clean Master\cmtray.exe" -autorun
MSCONFIG\startupreg: ISS Manager => C:\Program Files\ISS Manager\issmgr.exe
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{13D5E591-777C-4D09-81EA-2E95B83C392E}] => (Allow) C:\Users\Diaby\chroome.exe
FirewallRules: [{C2DD3C54-CDD0-43BD-914A-28C6105522B2}] => (Allow) C:\Users\Diaby\chroome.exe
FirewallRules: [{A276F1FE-7447-4542-9645-85FAD1C61135}] => (Allow) C:\Users\Diaby\chroome.exe
FirewallRules: [{FCB48A8F-86C2-460D-AFDA-A12582B97AAE}] => (Allow) C:\Users\Diaby\chroome.exe
FirewallRules: [{A3A5F400-B983-435A-B9D2-EC339DD1DF94}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{9EA9160C-89B3-4C45-9BE1-EDE57F6D0E4E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{95112EFF-A2A6-4DAC-8ADA-A97652F76509}] => (Allow) C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{8F8ADF90-4648-4668-B017-A188EB62B383}] => (Allow) LPort=2869
FirewallRules: [{B0F585EB-33CA-4135-B460-D22552F3BC07}] => (Allow) LPort=1900
FirewallRules: [{473FF260-66B7-49EB-B8A3-82AC4EC484EE}] => (Allow) LPort=3389
FirewallRules: [TCP Query User{7B1C26BC-3BB8-461F-A25D-CC944425EFE3}C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [UDP Query User{3D2EC04A-9B82-4A09-8B17-19F643C99971}C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [{9C1CFC25-BC0C-414C-A9E9-5AA66A8B5EA9}] => (Block) C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [{25215BA6-17A2-4733-9CBC-06BCC7D8EA0A}] => (Allow) LPort=58172
FirewallRules: [{4ED1B5CA-1072-45CB-A9A8-7BAEA016166E}] => (Allow) LPort=1489
FirewallRules: [{4BF2DABB-0972-4584-954C-E264B71589A3}] => (Allow) LPort=5000
FirewallRules: [{7DC51F9C-5CFC-4DE2-B009-E6332AF9A905}] => (Allow) C:\ProgramData\explorer.exe
FirewallRules: [{F0E2C042-ED87-4025-8634-0AB4C57127C7}] => (Allow) C:\ProgramData\explorer.exe
FirewallRules: [{1A30E93B-67E9-49C5-903C-757DADAF9AAC}] => (Allow) C:\ProgramData\explorer.exe
FirewallRules: [{BA773F82-D89F-41A7-9856-6AD9E119C464}] => (Allow) C:\ProgramData\explorer.exe
FirewallRules: [{793CECE7-5872-47A9-9D57-D87D9D7C7454}] => (Allow) njRAT
FirewallRules: [{EF108834-64F2-4193-8EC3-85F9CAA65631}] => (Allow) LPort=1177
FirewallRules: [{F2BAA59A-6E9F-4F1A-A2CD-6121FC6A306B}] => (Allow) LPort=1177
FirewallRules: [{2D940863-3BD6-4878-8051-1681849891EB}] => (Allow) njRAT
FirewallRules: [{1C0E8907-2486-4047-9E44-DC75E6BB0227}] => (Allow) LPort=1127
FirewallRules: [{2A190711-91C3-489F-8078-E814AB435CE0}] => (Allow) LPort=1127
FirewallRules: [{A3D3CB4B-923B-4757-B5F9-4CE0E30794FB}] => (Allow) njRAT
FirewallRules: [{466FDE28-6E47-49C0-A57B-F2DF9ECB3D30}] => (Allow) LPort=1127
FirewallRules: [{D47638C0-5326-4988-96B8-34273ECF2C55}] => (Allow) LPort=1127
FirewallRules: [{3928AA91-BCDD-4BAA-BCCF-DF8DA51A3D6D}] => (Allow) NanoCore
FirewallRules: [{0B08E21F-473A-413A-A89C-F101CE2F9DE4}] => (Allow) LPort=1127
FirewallRules: [{BCA3307E-18AF-478F-B9A0-249E5A2E0795}] => (Allow) LPort=1127
FirewallRules: [{EBADB93D-194D-4D25-B2F1-18B30856213C}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis.exe
FirewallRules: [{05829CC3-711E-4510-9F9C-4D78414F26C2}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis.exe
FirewallRules: [{B8D4B917-3F6A-4FBE-99DC-791734E73E8A}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis64.exe
FirewallRules: [{4CDBDC0F-D7D6-446B-B8CC-1F06BCA66975}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis64.exe
FirewallRules: [{463FA5B2-5EE8-4077-B8CC-56AD0D60CC45}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGI.exe
FirewallRules: [{6A26E352-8FF7-4167-A886-4762952C5A3E}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGI.exe
FirewallRules: [{BFE1D465-A215-431D-B60D-EBA250CE5E37}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGIN.exe
FirewallRules: [{4C178425-8BBE-43AD-81F0-351E254B0028}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGIN.exe
FirewallRules: [{F14929DF-532C-4BCD-A294-2345D33CFF0D}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\crossfire.exe
FirewallRules: [{D8EE6208-5DFD-4347-B4D3-58CC48E6FCCA}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\crossfire.exe
FirewallRules: [{C4CDB097-37A8-4062-86DD-25628C2959A5}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe
FirewallRules: [{73CC62E5-F114-4BCF-BF2B-8C2E1A42F056}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe
FirewallRules: [{24559BC8-8856-45C1-BE4B-178CFB1DAFB3}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe
FirewallRules: [{2FC97218-D1B0-441B-AEE4-59CCAA0796E2}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe
FirewallRules: [{15482131-C439-4CEE-82AB-6C1D1CA68F35}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\patcher_cf.exe
FirewallRules: [{D46A9BCC-05FD-4EF6-8217-8B4D13156C94}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\patcher_cf.exe
FirewallRules: [{CC5484FF-EB00-4ABE-8331-B9293F848B0D}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe
FirewallRules: [{0199540C-44DB-41ED-BC1D-E4F211835B88}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe
FirewallRules: [{CCEE74C3-EE4A-474A-870F-FF677A73B561}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe
FirewallRules: [{26858C60-644D-4D01-B059-6C98A95F311D}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe
FirewallRules: [{3D427CF5-89C5-4FB9-B724-A34CD435B5A4}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{C9B16962-A746-452F-8266-6052C8AF3770}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{F51AC3C7-2C05-4F4B-82A9-6D7D00860F56}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{C933D294-62EF-4DB1-9403-9AC5FDCFB046}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{ED9FD8B6-8C16-47A6-8760-249B66230751}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{A3135243-BCCC-47C6-9D90-457070296462}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{100498FD-C1D0-4737-BB95-FDC967F1E44E}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{77883A27-0B1C-4C30-A90D-5F2E27376D8B}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{2AA295E6-3E97-4218-B4AD-E95D580B990A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{6FDC1552-9457-436D-A1D6-91396DAD3585}] => (Allow) C:\Windows\system32\rundll32.exe
FirewallRules: [{B2C4C927-E74C-4C15-B54B-AE89A763D3E3}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{31617CB1-65E6-4D5E-80D2-3021EB321B4D}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{F3B6761E-389B-43CB-BB90-BA3F01FFAE66}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{ACB1C313-5B0F-4FA4-B234-D64FD552041E}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{74C9CC5A-DAF3-4B7E-AB83-17F89EF3FFD2}] => (Allow) C:\Program Files\IObit\IObit Malware Fighter\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{396AC777-33A5-49F0-949A-A265E225F9B5}] => (Allow) C:\Program Files\IObit\IObit Malware Fighter\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{F1BB84CB-9ECC-4302-83FF-DE6637C446E2}] => (Allow) C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{9DAB0D8F-0486-4E70-94E3-52C647B6DC58}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{DF01D074-3F3E-4576-906F-16039E622166}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{C412DB7A-1E44-4FD4-8455-2F5718DC2197}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{A5D6C0D6-8813-4765-997E-C64DDB74BC94}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
StandardProfile\AuthorizedApplications: [C:\Users\Diaby\AppData\Roaming\DDos.exe] => Enabled:Windows Messanger
StandardProfile\AuthorizedApplications: [C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe] => Enabled:Windows Messanger
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Points de restauration =========================
01-08-2017 17:17:11 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques =============
Name: Microsoft Teredo Tunneling Adapter
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Souris compatible PS/2
Description: Souris compatible PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (08/02/2017 01:28:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante Injector.exe, version : 0.0.0.0, horodatage : 0x4e5af8fe
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000005
Décalage d’erreur : 0x00000000
ID du processus défaillant : 0x884
Heure de début de l’application défaillante : 0x01d30b822c3e350f
Chemin d’accès de l’application défaillante : C:\Nouveau dossier\YangBug\YangBug\Injector.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : bb38fe58-7775-11e7-8c67-00163560a5a2
Error: (08/02/2017 01:28:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante metin2client.exe, version : 1.0.28249.0, horodatage : 0x5966e9e0
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0x40000015
Décalage d’erreur : 0x0653fbb4
ID du processus défaillant : 0x1b34
Heure de début de l’application défaillante : 0x01d30b82150d6f85
Chemin d’accès de l’application défaillante : C:\Nouveau dossier\Imperial MT2 3.3\metin2client.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : b76327f1-7775-11e7-8c67-00163560a5a2
Error: (08/02/2017 10:18:28 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/02/2017 09:37:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/01/2017 10:01:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme ZHPDiag3 (2).exe version 2017.8.1.132 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 400
Heure de début : 01d30affed7d1039
Heure de fin : 7907
Chemin d’accès de l’application : C:\Users\Diaby\Downloads\ZHPDiag3 (2).exe
ID de rapport : 2196de21-76f4-11e7-8cc5-00163560a5a2
Error: (08/01/2017 05:16:34 PM) (Source: Software Protection Platform Service) (EventID: 8208) (User: )
Description: Échec de l’acquisition d’un ticket authentique (hr=0xC004C533) pour l’Id de modèle 66c92734-d682-4d71-983e-d6ec3f16059f
Error: (08/01/2017 05:16:34 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Détails de l’échec d’acquisition de la licence.
hr=0xC004C533
Error: (08/01/2017 03:56:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme NOTEPAD.EXE version 6.1.7601.18917 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 15c4
Heure de début : 01d30acde65c5996
Heure de fin : 16
Chemin d’accès de l’application : C:\Windows\system32\NOTEPAD.EXE
ID de rapport : 399b908b-76c1-11e7-8cc5-00163560a5a2
Error: (08/01/2017 03:56:29 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme NOTEPAD.EXE version 6.1.7601.18917 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 101c
Heure de début : 01d30acdf2dc5fd3
Heure de fin : 0
Chemin d’accès de l’application : C:\Windows\system32\NOTEPAD.EXE
ID de rapport : 35f29461-76c1-11e7-8cc5-00163560a5a2
Error: (08/01/2017 02:51:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Erreurs système:
=============
Error: (08/02/2017 02:28:50 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT)
Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local.
Error: (08/02/2017 02:22:45 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT)
Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local.
Error: (08/02/2017 02:18:45 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT)
Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local.
Error: (08/02/2017 02:16:18 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT)
Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local.
Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Avira Protection e-mail dépend du service Avira Protection temps réel qui n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Avira Protection temps réel n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Avira Protection temps réel.
Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Avira Protection Web dépend du service Avira Protection temps réel qui n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (08/02/2017 02:13:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Avira Protection temps réel n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (08/02/2017 02:13:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Avira Protection temps réel.
CodeIntegrity:
===================================
Date: 2017-08-02 14:07:03.574
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 13:55:29.239
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 12:38:54.281
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 12:21:43.071
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 11:32:35.377
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 11:05:49.114
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 10:57:22.886
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 10:38:27.238
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 09:54:38.052
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-01 22:44:58.399
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Pentium(R) 4 CPU 3.00GHz
Pourcentage de mémoire utilisée: 80%
Mémoire physique - RAM - totale: 1015.43 MB
Mémoire physique - RAM - disponible: 200.27 MB
Mémoire virtuelle totale: 3015.43 MB
Mémoire virtuelle disponible: 1053.12 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:74.5 GB) (Free:12.37 GB) NTFS ==>[lecteur avec composants d'amorçage (obtenu depuis BCD)]
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: B5B42789)
Partition 1: (Active) - (Size=74.5 GB) - (Type=07 NTFS)
==================== Fin de Addition.txt ============================
Exécuté par Diaby (02-08-2017 14:22:58)
Exécuté depuis C:\Users\Diaby\Downloads
Microsoft Windows 7 Professionnel Service Pack 1 (X86) (2016-05-25 16:25:53)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
123 (S-1-5-21-377985148-792701347-3327087119-1003 - Administrator - Enabled) => C:\Users\123
Administrateur (S-1-5-21-377985148-792701347-3327087119-500 - Administrator - Enabled) => C:\Users\Administrateur.Diaby-PC.000
Diaby (S-1-5-21-377985148-792701347-3327087119-1001 - Administrator - Enabled) => C:\Users\Diaby
HomeGroupUser$ (S-1-5-21-377985148-792701347-3327087119-1002 - Limited - Enabled)
Invité (S-1-5-21-377985148-792701347-3327087119-501 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avira Antivirus (Disabled - Out of date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Emsisoft Anti-Malware (Enabled - Up to date) {701CB209-EBBC-AADC-11E6-DE73E7AF4C9D}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620}
AS: Avira Antivirus (Disabled - Out of date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Flash Player 23 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 23.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 26 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 26.0.0.137 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM\...\Adobe Flash Player PPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM\...\Adobe Shockwave Player) (Version: 12.2.5.195 - Adobe Systems, Inc.)
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.28.28 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM\...\{661C79C2-D156-419C-81CA-D1A2523B0841}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Hidden
Avira Connect (HKLM\...\{dd9049b8-31d1-40bd-8c8c-97a7b087a78f}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG)
Bandicam (HKLM\...\Bandicam) (Version: 3.1.0.1064 - Bandisoft.com)
CCleaner (HKLM\...\CCleaner) (Version: 5.32 - Piriform)
CleanMem (HKLM\...\CleanMem) (Version: v2.5.0 - PcWinTech.com)
Crossfire Europe EU (HKLM\...\Crossfire Europe EU_is1) (Version: V1502 - Smilegate Europe)
D3DX10 (HKLM\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DarkComet RAT Remover version 1.0 (HKLM\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.)
DragonBoost (HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\119) (Version: - ) <==== ATTENTION
Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 2017.6 - Emsisoft Ltd.)
Galerie de photos (HKLM\...\{439B34FF-F74E-4807-B5E2-4B758551DA6B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
IObit Malware Fighter 5 (HKLM\...\IObit Malware Fighter_is1) (Version: 5.2 - IObit)
Junk Mail filter update (HKLM\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Keylogger Detector (HKLM\...\Keylogger Detector) (Version: - )
KeyScrambler (HKLM\...\KeyScrambler) (Version: 3.11.0.3 - QFX Software Corporation)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Metin2client 9.1 (HKLM\...\Metin2client 9.1) (Version: 9.1 - HackMetin2)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.6.2 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.6.01590 - Microsoft Corporation)
Microsoft .NET Framework 4.6.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01590 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{D9D937B0-E842-4130-9588-B948E876904A}) (Version: 10.0.1600.22 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM\...\{0266CCBE-BBD8-416C-A48F-7FC47C6DB566}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft Virtual PC 2007 SP1 (HKLM\...\{AD483998-2E9A-4405-83FF-6E503AF49CBB}) (Version: 6.0.192.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{CC1DB186-550F-3CFE-A2A9-EBA5E5A34BC1}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Module linguistique de la visionneuse d'aide Microsoft 1.0 - FRA (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - FRA) (Version: 1.0.30319 - Microsoft Corporation)
Movie Maker (HKLM\...\{21764A96-6748-4B83-89E7-7A5063BF156C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 54.0.1 (x86 fr) (HKLM\...\Mozilla Firefox 54.0.1 (x86 fr)) (Version: 54.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0.1 - Mozilla)
Objets de gestion Microsoft SQL Server 2008 R2 (HKLM\...\{B01A7AFC-0356-43AF-A333-C65912AEA8DC}) (Version: 10.50.1447.4 - Microsoft Corporation)
Oracle VM VirtualBox 5.1.24 (HKLM\...\{F57B99A8-C19B-4A3B-A7BE-BA20AD768EAB}) (Version: 5.1.24 - Oracle Corporation)
Outils Microsoft Visual Studio 2010 ADO.NET Entity Framework (HKLM\...\{3BA7E387-9401-3371-9464-5E224D243FC5}) (Version: 10.0.30319 - Microsoft Corporation)
Package de pilotes Windows - Intel Corporation (iegdmini) Display (10/26/2009 10.2.2.1450) (HKLM\...\7C12B3CB54A17AB537E54C97DA273A2685545A6C) (Version: 10/26/2009 10.2.2.1450 - Intel Corporation)
paint.net (HKLM\...\{A1D05314-DC32-4668-A97E-51060EC8BCCD}) (Version: 4.0.12 - dotPDN LLC)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7745 - Realtek Semiconductor Corp.)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
swMSM (HKLM\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 FRA (HKLM\...\{D60023FA-3DF1-4537-93DD-13024CC4E366}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.40 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\ChromeHTML: -> <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Diaby\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\FileSyncApi.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{8932AEFE-9DB6-4f43-AFB2-5682F55E773A}\InprocServer32 -> C:\Program Files\Microsoft Virtual PC\VPCShExH.DLL => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\FileSyncApi.dll => Pas de fichier
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [ANotepad++] -> {00F3C2EC-A6EE-11DE-A03A-EF8F55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2017-06-18] ()
ContextMenuHandlers1: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Pas de fichier
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2014-06-24] (Safer-Networking Ltd.)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2017-07-04] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers2: [Emsisoft Shell Extension] -> {AB77609F-2178-4E6F-9C4B-44AC179D937A} => C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\A2CONTMENU.DLL [2015-10-21] (Emsisoft Ltd)
ContextMenuHandlers3: [Emsisoft Shell Extension] -> {AB77609F-2178-4E6F-9C4B-44AC179D937A} => C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\A2CONTMENU.DLL [2015-10-21] (Emsisoft Ltd)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Nouveau dossier\DBZ SAGAS\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Pas de fichier
ContextMenuHandlers4: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-23] (Intel Corporation)
ContextMenuHandlers6: [Emsisoft Shell Extension] -> {AB77609F-2178-4E6F-9C4B-44AC179D937A} => C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\A2CONTMENU.DLL [2015-10-21] (Emsisoft Ltd)
ContextMenuHandlers6: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Nouveau dossier\DBZ SAGAS\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2014-06-24] (Safer-Networking Ltd.)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2017-07-04] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {39E1D631-4996-447D-9CE3-3AFEA13A9600} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe
Task: {3DF3DC04-E24C-4D03-85D9-55921202ABAD} - System32\Tasks\Uninstaller_SkipUac_Diaby => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {60C57FB4-AC86-4288-91D3-FC3CA7F62DDB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-30] (Piriform Ltd)
Task: {63A82D28-6501-4EF2-86CA-ED0BF04F85DE} - System32\Tasks\ASC9_SkipUac_Diaby => C:\Program Files\IObit\Advanced SystemCare\ASC.exe
Task: {88F3C205-198F-41C9-92F5-882B17F51D5A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-06] (Google Inc.)
Task: {8E191A9E-39C9-4CCB-9F98-4AD2013DEE5B} - System32\Tasks\ASC9_PerformanceMonitor => C:\Program Files\IObit\Advanced SystemCare\Monitor.exe
Task: {C62FF49E-0010-4735-952B-C835714327EF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-06] (Google Inc.)
Task: {CABC0647-C85E-4D8D-B2C8-4DF6C07BF4D0} - System32\Tasks\Driver Booster SkipUAC (Diaby) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\system32\Macromed\Flash\FlashUtil32_26_0_0_137_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Arkoghtpeguther.job => msiexecc i HtTp /d2buh1bf1g584w cloudfront net msi rel php ST380013AS_5MR157QQXXXX5MR157QQ 2017215 /qSystemArkoghtpeguther
Task: C:\Windows\Tasks\bvyvdvge.job => C:\Users\Diaby\AppData\Local\bvyvdvge\bvyvdvge.exe <==== ATTENTION
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Chrome Cleanup Tool logs upload retry.job => c:\users\mcdiaby\downloads\chrome_cleanup_tool.exe
Task: C:\Windows\Tasks\Clean System Memory.job => C:\WINDOWS\system32\CleanMem.exe
Task: C:\Windows\Tasks\Driver Booster SkipUAC (Diaby).job => C:\Program Files\IObit\Driver Booster\4.4.0\DriverBooster.exe
Task: C:\Windows\Tasks\Fevuphmervly Launcher.job => C:\Program Files\Holush\tugesh.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d1bffee1ac4c3e.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d1c000120ba96b.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d22066d30bdfad.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d2206738002651.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\McAfee Remediation (Prepare).job => C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe
Task: C:\Windows\Tasks\McAfeeLogon.job => C:\PROGRA~1\COMMON~1\McAfee\Platform\McUICnt.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: C:\Windows\Tasks\SidebarExecute.job => C:\Program Files\Windows Sidebar\sidebar.exe
Task: C:\Windows\Tasks\update-S-1-5-21-377985148-792701347-3327087119-1001.job => C:\Program Files\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\{04080DB5-B3A3-BA1E-9ECF-2C2F482411E3}.job => C:\ProgramData\{5D3FBC1B-EA94-0BB0-4697-C277095FC0B9}\BAAA0AD1-0D01-BD7A-E248-7C414E82C7A9.exe <==== ATTENTION
Task: C:\Windows\Tasks\{09E7DB74-84BA-4925-B16A-BDD9903CBA36}.job => c:\program files\google\chrome\application\chrome.exeJhxxp:/ui.skype.com/ui/0/7.25.85.106/fr/
Task: C:\Windows\Tasks\{1AC348B7-AD68-FF1C-B28E-D7154A60845C}.job => C:\ProgramData\{2ADA52B2-9D71-E519-B68B-EFE74E52E84A}\EFB82B81-5813-9C2A-BF51-6206F3DEFB7C.exe <==== ATTENTION
Task: C:\Windows\Tasks\{1BD3C577-AC78-72DC-73FA-BFCFD1282F09}.job => C:\ProgramData\{0A964816-BD3D-FFBD-BDCA-6C8656F7CE43}\D4C33FDF-6368-8874-57D1-DBADB47B1F7C.exe <==== ATTENTION
Task: C:\Windows\Tasks\{313B6D77-91B7-4729-A8CE-71B472DEFDFD}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/
Task: C:\Windows\Tasks\{35256B5B-A4F7-1A6B-BAA8-B9AFFA9C2D07}.job => C:\Windows\system32\regsvr32.exe2/s /n /i:/rt C:\PROGRA~2\24eb7141\8ef16ab.dll <==== ATTENTION
Task: C:\Windows\Tasks\{3672E31A-81D9-54B1-59B6-288993C49B47}.job => C:\ProgramData\{FEB2EEB1-4919-591A-050F-E1F613B5BBBA}\AAABC715-1D00-70BE-3D0D-A39CF865579B.exe <==== ATTENTION
Task: C:\Windows\Tasks\{3700379E-80AB-8035-7D42-73018BA78685}.job => C:\ProgramData\{C73B4B53-7090-FCF8-CE7A-92F193FBB1A6}\1C3DB022-AB96-0789-BA12-2FB945D9983A.exe <==== ATTENTION
Task: C:\Windows\Tasks\{3F82500D-8829-E7A6-8EED-8BD7AAAE4D4F}.job => C:\ProgramData\{3D643B4E-8ACF-8CE5-241F-49E64EEF689C}\F02F1B9B-4784-AC30-F39C-9E36064BA576.exe <==== ATTENTION
Task: C:\Windows\Tasks\{45485F2B-F2E3-E880-D53A-70275FF51A73}.job => C:\ProgramData\{38F2913E-8F59-2695-881F-B3DD7AF58906}\69941886-DE3F-AF2D-17D5-9FD11F3C79D8.exe <==== ATTENTION
Task: C:\Windows\Tasks\{6705E622-D0AE-5189-F8C7-23139FAAF4C5}.job => C:\ProgramData\{569560EE-E13E-D745-591F-72542F10399B}\58BAE327-EF11-548C-D0AE-074EDFA33E67.exe <==== ATTENTION
Task: C:\Windows\Tasks\{6AE6823C-DD4D-3597-24AA-41F7824849F9}.job => C:\ProgramData\{5489DA41-E322-6DEA-5282-E82ECC03789E}\1BA81A55-AC03-ADFE-89FB-35FEE2BFD88F.exe <==== ATTENTION
Task: C:\Windows\Tasks\{72A2A6F2-C509-1159-E877-5A279F6B89A6}.job => C:\ProgramData\{468CE655-F127-51FE-0A19-2AE671D4E195}\A52D55AE-1286-E205-080C-C068E5AFDEC9.exe <==== ATTENTION
Task: C:\Windows\Tasks\{803DA72D-3796-1086-18D9-B4B5A388E4CA}.job => C:\ProgramData\{E9C21179-5E69-A6D2-D749-CFDBBE1BDD20}\635CD343-D4F7-64E8-1A6E-BF8DD38E85A8.exe <==== ATTENTION
Task: C:\Windows\Tasks\{811BEB6F-36B0-5CC4-6E67-2B54C8A88248}.job => C:\ProgramData\{628A9872-D521-2FD9-353E-AF963088CA20}\D2C5448C-656E-F327-DDC2-A054A5D12A47.exe <==== ATTENTION
Task: C:\Windows\Tasks\{8CE64007-3B4D-F7AC-70D3-46226CC128C3}.job => C:\ProgramData\{B30F16F6-04A4-A15D-95BE-C6BDD0100C69}\1496588C-A33D-EF27-3B4A-C241CAD9A7CB.exe <==== ATTENTION
Task: C:\Windows\Tasks\{8DDB2B4C-2A59-4BD4-86E2-E3C071F88604}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/
Task: C:\Windows\Tasks\{B6D26BEC-0179-DC47-976C-B9812509626B}.job => C:\ProgramData\{9184BAC3-262F-0D68-46BE-627B3F7A829B}\AEF659C6-195D-EE6D-67FA-84071644728C.exe <==== ATTENTION
Task: C:\Windows\Tasks\{B9CC9342-A99F-494E-BDC8-B0144B2136BA}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/
Task: C:\Windows\Tasks\{BC335264-0B98-E5CF-1BCD-CDF3A77DB74F}.job => C:\ProgramData\{B9A92DBE-0E02-9A15-BFA7-6AE572100A97}\ED051D5F-5AAE-AAF4-904E-E9F75A6CB9E7.exe <==== ATTENTION
Task: C:\Windows\Tasks\{BC5A07C5-0BF1-B06E-75C8-F2A9D4292B36}.job => C:\ProgramData\{31AB411D-8600-F6B6-64FB-F7FC0B322FD5}\DDFC3FBF-6A57-8814-502A-B010479A09F4.exe <==== ATTENTION
Task: C:\Windows\Tasks\{C00DA454-77A6-13FF-9770-3F58EDDC6571}.job => C:\ProgramData\{497C8777-FED7-30DC-D3F1-8E44E4C657ED}\145BF631-A3F0-419A-6D12-0B5318A793BC.exe <==== ATTENTION
Task: C:\Windows\Tasks\{C105346C-316B-4307-97C6-16882327ADA8}.job => c:\program files\google\chrome\application\chrome.exe_hxxp:/ui.skype.com/ui/0/7.24.0.104/fr/
Task: C:\Windows\Tasks\{C38ABE1B-7421-09B0-8E43-F48334855F6F}.job => C:\ProgramData\{79102ABB-CEBB-9D10-6AEC-55BDC884F946}\7B174E98-CCBC-F933-5465-0CD7663A3494.exe <==== ATTENTION
Task: C:\Windows\Tasks\{C72D3418-B588-43B7-A737-F7D20991DE46}.job => Iexplore exe3https /ui skype com ui 0 7 37 103 fr/
Task: C:\Windows\Tasks\{D0B53B8D-671E-8C26-13D2-039C28EE9AD7}.job => C:\ProgramData\{FFF45F86-485F-E82D-8C41-8779A1BD2E0A}\45CA3D03-F261-8AA8-11D6-CD6247A66E73.exe <==== ATTENTION
Task: C:\Windows\Tasks\{D1F95EA7-6652-E90C-6809-87E1AD9F0189}.job => C:\ProgramData\{2C572639-9BFC-9192-B446-5F136B69EC58}\9C2974EA-2B82-C341-7748-620E472CF6A4.exe <==== ATTENTION
Task: C:\Windows\Tasks\{D7471C96-60EC-AB3D-6467-90C2A1FFEC24}.job => C:\ProgramData\{8CB97737-3B12-C09C-5E2D-BF6C9EC40C1A}\1B614C5F-ACCA-FBF4-330F-E58BEC505FAC.exe <==== ATTENTION
Task: C:\Windows\Tasks\{DA2F7091-AA65-4DA2-A47C-02D8DE44B460}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/
Task: C:\Windows\Tasks\{DC736D9A-6BD8-DA31-C4D2-9966D4182587}.job => C:\ProgramData\{4B11775E-FCBA-C0F5-C26F-8A2BEF93D7E1}\3FCD172C-8866-A087-F779-CF33A408E177.exe <==== ATTENTION
Task: C:\Windows\Tasks\{EA9ACF9D-5D31-7836-8488-FD37BF743D2F}.job => C:\ProgramData\{386F9E0C-8FC4-29A7-6F6E-4EB2066B904E}\CC5AD77B-7BF1-60D0-7162-198937D7110E.exe <==== ATTENTION
Task: C:\Windows\Tasks\{F6C32E6E-4168-99C5-BFFD-82F34EAF93DB}.job => C:\ProgramData\{7FC06DF5-C86B-DA5E-7D26-088EB8EB7485}\EB18B799-5CB3-0032-095D-6BA79023F5EE.exe <==== ATTENTION
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
ShortcutWithArgument: C:\Users\Diaby\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\user0 - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=ChromeDefaultData
==================== Modules chargés (Avec liste blanche) ==============
2017-07-30 17:28 - 2014-05-13 12:04 - 000109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2017-07-30 17:28 - 2014-05-13 12:04 - 000416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2017-07-30 17:28 - 2014-05-13 12:04 - 000167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-07-30 17:28 - 2012-08-23 10:38 - 000574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2017-07-30 17:28 - 2012-04-03 17:06 - 000565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2017-06-30 13:22 - 2017-06-30 13:22 - 000077824 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2017-07-30 20:07 - 2016-08-10 17:13 - 000188704 _____ () C:\Program Files\IObit\IObit Malware Fighter\unrar.dll
2017-07-30 20:07 - 2016-08-10 17:13 - 000899872 _____ () C:\Program Files\IObit\IObit Malware Fighter\webres.dll
2017-07-30 20:07 - 2016-08-10 17:13 - 000151840 _____ () C:\Program Files\IObit\IObit Malware Fighter\zlibwapi.dll
2017-07-30 20:07 - 2017-05-09 10:59 - 000631584 _____ () C:\Program Files\IObit\IObit Malware Fighter\ProductStatistics.dll
2017-07-30 20:07 - 2016-12-12 16:52 - 000442144 _____ () C:\Program Files\IObit\IObit Malware Fighter\madExcept_.bpl
2017-07-30 20:07 - 2016-12-12 16:52 - 000210720 _____ () C:\Program Files\IObit\IObit Malware Fighter\madBasic_.bpl
2017-07-30 20:07 - 2016-12-12 16:52 - 000059680 _____ () C:\Program Files\IObit\IObit Malware Fighter\madDisAsm_.bpl
2017-06-12 19:51 - 2017-06-12 19:51 - 000048296 ____N () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2017-06-18 23:44 - 2017-06-18 23:44 - 000267952 ____N () C:\Program Files\Notepad++\NppShell_06.dll
2017-08-02 12:52 - 2016-08-10 17:20 - 001079296 _____ () C:\Nouveau dossier\YangBug\YangBug\Injector.exe
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ModuleCoreService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ASCAntivirusSrv => "@"="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\IMFservice => "@"="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ModuleCoreService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Il y a 7865 plus de sites.
IE trusted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\localhost -> localhost
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123simsen.com -> www.123simsen.com
Il y a 7865 plus de sites.
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123simsen.com -> www.123simsen.com
Il y a 7865 plus de sites.
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123simsen.com -> www.123simsen.com
Il y a 7865 plus de sites.
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-377985148-792701347-3327087119-1001\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-377985148-792701347-3327087119-1003\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-377985148-792701347-3327087119-500\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.0.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
MSCONFIG\Services: AdvancedSystemCareService9 => 2
MSCONFIG\Services: cmcore => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: LiveUpdateSvc => 2
MSCONFIG\Services: sgbupt => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: cmsc => "c:\program files\cmcm\Clean Master\cmtray.exe" -autorun
MSCONFIG\startupreg: ISS Manager => C:\Program Files\ISS Manager\issmgr.exe
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{13D5E591-777C-4D09-81EA-2E95B83C392E}] => (Allow) C:\Users\Diaby\chroome.exe
FirewallRules: [{C2DD3C54-CDD0-43BD-914A-28C6105522B2}] => (Allow) C:\Users\Diaby\chroome.exe
FirewallRules: [{A276F1FE-7447-4542-9645-85FAD1C61135}] => (Allow) C:\Users\Diaby\chroome.exe
FirewallRules: [{FCB48A8F-86C2-460D-AFDA-A12582B97AAE}] => (Allow) C:\Users\Diaby\chroome.exe
FirewallRules: [{A3A5F400-B983-435A-B9D2-EC339DD1DF94}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{9EA9160C-89B3-4C45-9BE1-EDE57F6D0E4E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{95112EFF-A2A6-4DAC-8ADA-A97652F76509}] => (Allow) C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{8F8ADF90-4648-4668-B017-A188EB62B383}] => (Allow) LPort=2869
FirewallRules: [{B0F585EB-33CA-4135-B460-D22552F3BC07}] => (Allow) LPort=1900
FirewallRules: [{473FF260-66B7-49EB-B8A3-82AC4EC484EE}] => (Allow) LPort=3389
FirewallRules: [TCP Query User{7B1C26BC-3BB8-461F-A25D-CC944425EFE3}C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [UDP Query User{3D2EC04A-9B82-4A09-8B17-19F643C99971}C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [{9C1CFC25-BC0C-414C-A9E9-5AA66A8B5EA9}] => (Block) C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [{25215BA6-17A2-4733-9CBC-06BCC7D8EA0A}] => (Allow) LPort=58172
FirewallRules: [{4ED1B5CA-1072-45CB-A9A8-7BAEA016166E}] => (Allow) LPort=1489
FirewallRules: [{4BF2DABB-0972-4584-954C-E264B71589A3}] => (Allow) LPort=5000
FirewallRules: [{7DC51F9C-5CFC-4DE2-B009-E6332AF9A905}] => (Allow) C:\ProgramData\explorer.exe
FirewallRules: [{F0E2C042-ED87-4025-8634-0AB4C57127C7}] => (Allow) C:\ProgramData\explorer.exe
FirewallRules: [{1A30E93B-67E9-49C5-903C-757DADAF9AAC}] => (Allow) C:\ProgramData\explorer.exe
FirewallRules: [{BA773F82-D89F-41A7-9856-6AD9E119C464}] => (Allow) C:\ProgramData\explorer.exe
FirewallRules: [{793CECE7-5872-47A9-9D57-D87D9D7C7454}] => (Allow) njRAT
FirewallRules: [{EF108834-64F2-4193-8EC3-85F9CAA65631}] => (Allow) LPort=1177
FirewallRules: [{F2BAA59A-6E9F-4F1A-A2CD-6121FC6A306B}] => (Allow) LPort=1177
FirewallRules: [{2D940863-3BD6-4878-8051-1681849891EB}] => (Allow) njRAT
FirewallRules: [{1C0E8907-2486-4047-9E44-DC75E6BB0227}] => (Allow) LPort=1127
FirewallRules: [{2A190711-91C3-489F-8078-E814AB435CE0}] => (Allow) LPort=1127
FirewallRules: [{A3D3CB4B-923B-4757-B5F9-4CE0E30794FB}] => (Allow) njRAT
FirewallRules: [{466FDE28-6E47-49C0-A57B-F2DF9ECB3D30}] => (Allow) LPort=1127
FirewallRules: [{D47638C0-5326-4988-96B8-34273ECF2C55}] => (Allow) LPort=1127
FirewallRules: [{3928AA91-BCDD-4BAA-BCCF-DF8DA51A3D6D}] => (Allow) NanoCore
FirewallRules: [{0B08E21F-473A-413A-A89C-F101CE2F9DE4}] => (Allow) LPort=1127
FirewallRules: [{BCA3307E-18AF-478F-B9A0-249E5A2E0795}] => (Allow) LPort=1127
FirewallRules: [{EBADB93D-194D-4D25-B2F1-18B30856213C}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis.exe
FirewallRules: [{05829CC3-711E-4510-9F9C-4D78414F26C2}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis.exe
FirewallRules: [{B8D4B917-3F6A-4FBE-99DC-791734E73E8A}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis64.exe
FirewallRules: [{4CDBDC0F-D7D6-446B-B8CC-1F06BCA66975}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis64.exe
FirewallRules: [{463FA5B2-5EE8-4077-B8CC-56AD0D60CC45}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGI.exe
FirewallRules: [{6A26E352-8FF7-4167-A886-4762952C5A3E}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGI.exe
FirewallRules: [{BFE1D465-A215-431D-B60D-EBA250CE5E37}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGIN.exe
FirewallRules: [{4C178425-8BBE-43AD-81F0-351E254B0028}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGIN.exe
FirewallRules: [{F14929DF-532C-4BCD-A294-2345D33CFF0D}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\crossfire.exe
FirewallRules: [{D8EE6208-5DFD-4347-B4D3-58CC48E6FCCA}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\crossfire.exe
FirewallRules: [{C4CDB097-37A8-4062-86DD-25628C2959A5}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe
FirewallRules: [{73CC62E5-F114-4BCF-BF2B-8C2E1A42F056}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe
FirewallRules: [{24559BC8-8856-45C1-BE4B-178CFB1DAFB3}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe
FirewallRules: [{2FC97218-D1B0-441B-AEE4-59CCAA0796E2}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe
FirewallRules: [{15482131-C439-4CEE-82AB-6C1D1CA68F35}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\patcher_cf.exe
FirewallRules: [{D46A9BCC-05FD-4EF6-8217-8B4D13156C94}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\patcher_cf.exe
FirewallRules: [{CC5484FF-EB00-4ABE-8331-B9293F848B0D}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe
FirewallRules: [{0199540C-44DB-41ED-BC1D-E4F211835B88}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe
FirewallRules: [{CCEE74C3-EE4A-474A-870F-FF677A73B561}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe
FirewallRules: [{26858C60-644D-4D01-B059-6C98A95F311D}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe
FirewallRules: [{3D427CF5-89C5-4FB9-B724-A34CD435B5A4}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{C9B16962-A746-452F-8266-6052C8AF3770}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{F51AC3C7-2C05-4F4B-82A9-6D7D00860F56}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{C933D294-62EF-4DB1-9403-9AC5FDCFB046}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{ED9FD8B6-8C16-47A6-8760-249B66230751}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{A3135243-BCCC-47C6-9D90-457070296462}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{100498FD-C1D0-4737-BB95-FDC967F1E44E}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{77883A27-0B1C-4C30-A90D-5F2E27376D8B}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{2AA295E6-3E97-4218-B4AD-E95D580B990A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{6FDC1552-9457-436D-A1D6-91396DAD3585}] => (Allow) C:\Windows\system32\rundll32.exe
FirewallRules: [{B2C4C927-E74C-4C15-B54B-AE89A763D3E3}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{31617CB1-65E6-4D5E-80D2-3021EB321B4D}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{F3B6761E-389B-43CB-BB90-BA3F01FFAE66}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{ACB1C313-5B0F-4FA4-B234-D64FD552041E}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe
FirewallRules: [{74C9CC5A-DAF3-4B7E-AB83-17F89EF3FFD2}] => (Allow) C:\Program Files\IObit\IObit Malware Fighter\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{396AC777-33A5-49F0-949A-A265E225F9B5}] => (Allow) C:\Program Files\IObit\IObit Malware Fighter\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{F1BB84CB-9ECC-4302-83FF-DE6637C446E2}] => (Allow) C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{9DAB0D8F-0486-4E70-94E3-52C647B6DC58}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{DF01D074-3F3E-4576-906F-16039E622166}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{C412DB7A-1E44-4FD4-8455-2F5718DC2197}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
FirewallRules: [{A5D6C0D6-8813-4765-997E-C64DDB74BC94}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe
StandardProfile\AuthorizedApplications: [C:\Users\Diaby\AppData\Roaming\DDos.exe] => Enabled:Windows Messanger
StandardProfile\AuthorizedApplications: [C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe] => Enabled:Windows Messanger
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Points de restauration =========================
01-08-2017 17:17:11 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques =============
Name: Microsoft Teredo Tunneling Adapter
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Souris compatible PS/2
Description: Souris compatible PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (08/02/2017 01:28:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante Injector.exe, version : 0.0.0.0, horodatage : 0x4e5af8fe
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000005
Décalage d’erreur : 0x00000000
ID du processus défaillant : 0x884
Heure de début de l’application défaillante : 0x01d30b822c3e350f
Chemin d’accès de l’application défaillante : C:\Nouveau dossier\YangBug\YangBug\Injector.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : bb38fe58-7775-11e7-8c67-00163560a5a2
Error: (08/02/2017 01:28:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante metin2client.exe, version : 1.0.28249.0, horodatage : 0x5966e9e0
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0x40000015
Décalage d’erreur : 0x0653fbb4
ID du processus défaillant : 0x1b34
Heure de début de l’application défaillante : 0x01d30b82150d6f85
Chemin d’accès de l’application défaillante : C:\Nouveau dossier\Imperial MT2 3.3\metin2client.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : b76327f1-7775-11e7-8c67-00163560a5a2
Error: (08/02/2017 10:18:28 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/02/2017 09:37:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/01/2017 10:01:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme ZHPDiag3 (2).exe version 2017.8.1.132 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 400
Heure de début : 01d30affed7d1039
Heure de fin : 7907
Chemin d’accès de l’application : C:\Users\Diaby\Downloads\ZHPDiag3 (2).exe
ID de rapport : 2196de21-76f4-11e7-8cc5-00163560a5a2
Error: (08/01/2017 05:16:34 PM) (Source: Software Protection Platform Service) (EventID: 8208) (User: )
Description: Échec de l’acquisition d’un ticket authentique (hr=0xC004C533) pour l’Id de modèle 66c92734-d682-4d71-983e-d6ec3f16059f
Error: (08/01/2017 05:16:34 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Détails de l’échec d’acquisition de la licence.
hr=0xC004C533
Error: (08/01/2017 03:56:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme NOTEPAD.EXE version 6.1.7601.18917 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 15c4
Heure de début : 01d30acde65c5996
Heure de fin : 16
Chemin d’accès de l’application : C:\Windows\system32\NOTEPAD.EXE
ID de rapport : 399b908b-76c1-11e7-8cc5-00163560a5a2
Error: (08/01/2017 03:56:29 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme NOTEPAD.EXE version 6.1.7601.18917 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 101c
Heure de début : 01d30acdf2dc5fd3
Heure de fin : 0
Chemin d’accès de l’application : C:\Windows\system32\NOTEPAD.EXE
ID de rapport : 35f29461-76c1-11e7-8cc5-00163560a5a2
Error: (08/01/2017 02:51:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Erreurs système:
=============
Error: (08/02/2017 02:28:50 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT)
Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local.
Error: (08/02/2017 02:22:45 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT)
Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local.
Error: (08/02/2017 02:18:45 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT)
Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local.
Error: (08/02/2017 02:16:18 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT)
Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local.
Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Avira Protection e-mail dépend du service Avira Protection temps réel qui n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Avira Protection temps réel n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Avira Protection temps réel.
Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Avira Protection Web dépend du service Avira Protection temps réel qui n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (08/02/2017 02:13:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Avira Protection temps réel n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (08/02/2017 02:13:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Avira Protection temps réel.
CodeIntegrity:
===================================
Date: 2017-08-02 14:07:03.574
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 13:55:29.239
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 12:38:54.281
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 12:21:43.071
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 11:32:35.377
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 11:05:49.114
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 10:57:22.886
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 10:38:27.238
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-02 09:54:38.052
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
Date: 2017-08-01 22:44:58.399
Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Pentium(R) 4 CPU 3.00GHz
Pourcentage de mémoire utilisée: 80%
Mémoire physique - RAM - totale: 1015.43 MB
Mémoire physique - RAM - disponible: 200.27 MB
Mémoire virtuelle totale: 3015.43 MB
Mémoire virtuelle disponible: 1053.12 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:74.5 GB) (Free:12.37 GB) NTFS ==>[lecteur avec composants d'amorçage (obtenu depuis BCD)]
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: B5B42789)
Partition 1: (Active) - (Size=74.5 GB) - (Type=07 NTFS)
==================== Fin de Addition.txt ============================